BYOKState

BYOK ("Bring Your Own Key") Lite state for an organization. Derived server-side from byok.GetActive(orgID) + the SP-4C deferred-downgrade flag (T5 wires LITE_DOWNGRADE_GRACE; T2 ships NONE / LITE_ACTIVE only).

enum BYOKState {
  NONE
  LITE_ACTIVE
  LITE_SUPERSEDED_GRACE
  LITE_DOWNGRADE_GRACE
}

Values

`BYOKState.NONE`

No customer-supplied key escrow active.

`BYOKState.LITE_ACTIVE`

Customer key active and is the sole live escrow row.

`BYOKState.LITE_SUPERSEDED_GRACE`

Rotation in progress — previous key superseded but valid for the 24h grace window.

`BYOKState.LITE_DOWNGRADE_GRACE`

Subscription downgraded — auto-disable scheduled at grace_until.

Member Of

SecurityPostureSummary object

Values​

BYOKState.NONE​

BYOKState.LITE_ACTIVE​

BYOKState.LITE_SUPERSEDED_GRACE​

BYOKState.LITE_DOWNGRADE_GRACE​

Member Of​